https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:58:40 +0000 https://cve.radiocsirt.org/vuln/cnvd-2016-01922 cnvd-2016-01922 https://cve.radiocsirt.org/vuln/cnvd-2016-01922 https://cve.radiocsirt.org/vuln/euvd-2026-83723 EUVD-2026-83723 https://cve.radiocsirt.org/vuln/euvd-2026-83723 https://cve.radiocsirt.org/vuln/fkie_cve-2016-3674 <p>Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Driver, (5) SjsxpDriver, (6) StandardStaxDriver, and (7) WstxDriver drivers in XStream before 1.4.9 allow remote attackers to read arbitrary files via a crafted XML document.</p> <p>Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Driver, (5) SjsxpDriver, (6) StandardStaxDriver, and (7) WstxDriver drivers in XStream before 1.4.9 allow remote attackers to read arbitrary files via a crafted XML document.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-3674 https://cve.radiocsirt.org/vuln/ghsa-rgh3-987h-wpmw <p><strong>Affected:</strong> Maven: com.thoughtworks.xstream:xstream</p> <p>Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Driver, (5) SjsxpDriver, (6) StandardStaxDriver, and (7) WstxDriver drivers in XStream before 1.4.9 allow remote attackers to read arbitrary files via a crafted XML document.</p> <p><strong>Affected:</strong> Maven: com.thoughtworks.xstream:xstream</p> <p>Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Driver, (5) SjsxpDriver, (6) StandardStaxDriver, and (7) WstxDriver drivers in XStream before 1.4.9 allow remote attackers to read arbitrary files via a crafted XML document.</p> https://cve.radiocsirt.org/vuln/ghsa-rgh3-987h-wpmw https://cve.radiocsirt.org/vuln/gsd-2016-3674 gsd-2016-3674 https://cve.radiocsirt.org/vuln/gsd-2016-3674 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10592-1 <p>xstream-1.4.18-1.1 on GA media</p> <p>xstream-1.4.18-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10592-1 https://cve.radiocsirt.org/vuln/rhsa-2016:2822 <p>XStream: enabled processing of external entities Workbench: Path traversal vulnerability Stored XSS in business process editor</p> <p>XStream: enabled processing of external entities Workbench: Path traversal vulnerability Stored XSS in business process editor</p> https://cve.radiocsirt.org/vuln/rhsa-2016:2822 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-3674 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libxstream-java, Ubuntu:Pro:16.04:LTS: libxstream-java</p> <p>Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Driver, (5) SjsxpDriver, (6) StandardStaxDriver, and (7) WstxDriver drivers in XStream before 1.4.9 allow remote attackers to read arbitrary files via a crafted XML document.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libxstream-java, Ubuntu:Pro:16.04:LTS: libxstream-java</p> <p>Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Driver, (5) SjsxpDriver, (6) StandardStaxDriver, and (7) WstxDriver drivers in XStream before 1.4.9 allow remote attackers to read arbitrary files via a crafted XML document.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-3674 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375